Platform as a Service and Force.com

I haven’t written much about "Platform as a Service" (PaaS) up to this point but given Salesforce.com’s growing presence the buzz generated from annual user love-in, Dreamforce, this is a good time to talk about PaaS and Salesforce.  According to this article, Gartner predicts that PaaS platforms will grow from $900 million in 2011 to $2.9 billion in 2016, representing a 26.6 percent rise each year.

Although SalesForce.com (SFDC) is best known for its customer relationship management solution delivered as a service via a cloud, force.com is SFDC’s “platform as a service” offering.  By giving their customers a foundational component for sales and also providing an environment that allows customers to add on the pieces that they need while leveraging a common user interface, authentication framework, it accelerates the potential ROI to customers (and revenue streams for SFDC).  This article will review  PaaS, touch on the advantages, and then talk a little more about why PaaS at SFDC is such a powerful combination.  

CloudPassage Cloud Security Product Review

Updated:I came across a white paper published by CloudPassage, most likely in the attempt to drive interest in their cloud security product.  It worked, since it resulted in my doing a little digging into their product.  They did bring up a security threat I hadn’t thought of and it was just enticing enough to get me to investigate their offering a little further.  Their paper was focused on Infrastructure as a Service (IaaS) environments like Amazon Web Services (AWS) (reviewed here), or Rackspace (reviewed here).  The CloudPassage paper focused on the security threats within the context of the products that they offer in order to mitigate these threats.

I will review some of the key points made by CloudPassage here, and then I’ll review their solution offering.   Hang on though -- this article assumes you understand cloud IaaS, and some general Linux and security topics.

VMware Offers Disaster Recovery To The Cloud

I sat in on a VMware call today where they reviewed the new features in VMware 5.1.  The one that caught my eye was the ability to use the Cloud as a disaster recovery point.  In my article “How to Get Started With Cloud Computing”, I mentioned that one way was to use the cloud was as an inexpensive backup data center for your private cloud.  VMware just made this easier for customers that upgrade or implement VMware 5.1.

Patch Management in the Cloud

I was on my way to a lunch appointment when I started thinking of the headache of managing patching in the cloud.  More importantly how would you ensure that your template server that is used to clone for new servers is current?  

To resolve this, I’d love to see a cloud provider offer the ability to patch the dark VM on disk and if you have a local cloud, say using vmWare, do the same thing to your VM on disk.  After all, there’s an exploit to go directly to a VM image, why not a program that will scan that disk image?

Quick Review and Comparison of Rackspace

Rackspace, a cloud infrastructure as a service (IaaS) vendor, has been ramping up their advertising and recently announced that they were giving away their cloud management software for free for use in private clouds.  Given all the activity and buzz in the media about Rackspace and OpenStack, I thought I’d give Rackspace a test run.  I used the same approach that I used in my Amazon AWS review and setup an application on their cloud for a semi real-world trial.  Given that I’ve used AWS, I’ll try to do some quick comparisons as well. 

Rackspace Releases OpenStack Private For Free

I recently wrote about HP’s use OpenStack as part of their newly announced cloud hosting environment and how it could help feed their consulting and cloud offering sales.   Rackspace, who have been using OpenStack for a while, may be trying to capitalize on the same approach as HP by releasing their build of OpenStack for free.  I continue to think that these moves will allow CIO’s who don’t want to be left out,  implement internal clouds using the same technology and leave open an easy migration path to the providers public cloud.  In addition to this, Rackspace reminds the market of their relevance in cloud computing.  

CFO’s see value in the cloud, Being Courted by Google

According to a Google’s BLOG, in a survey of 800 CFOs, 81% think (AKA a believe) that completely implementing cloud technology would improve employee productivity, and 71% say it would reduce the time required to bring new products and services to market.  The CFO on a company is normally a big part of the decision making process.  I point out “belief” because a lot of times decisions are made in part or whole on a person’s belief.  If the numbers in Google’s BLOG are true, it will continue to fill the sails of cloud computing growth in the years to come.  I can get pretty analytical, but in general, I align with with the conclusions for reduced time for new services and productivity.  Also notice, CFO’s are being courted by Google... and for good reason.

Another example of why to use Google’s Two-Factor Authentication

This is a good article on how to close security holes for Google Apps users.  At the core is “two-factor authentication”.  I’ve written about two factor authentication before and I wish it was available on more sites.  I like Google’s and PayPal’s implementation (using my iPhone to receive a one-time second authentication password).  It’s not a huge pain because I can check a box to have Google remember me for a while.  Why aren’t more sites using this?  My bank doesn’t even offer this.  Although two factor authentication isn’t the end all be all of security, it closes a gaping hole.

NASA Mars Mission Uses Amazon’s AWS

NASA’s use of Amazon’s AWS is interesting.  I knew that NASA had a private cloud so I didn’t expect them to use AWS.  I’m guessing this is a good example of using the cloud to augment capability quickly when you don’t have enough (cloud bursting) and take advantage of services that are too costly to build yourself.  NASA was able to quickly setup needed AWS EC2 services to prepare and serve images and then take advantage of Amazon’s huge network footprint to cache images on the edge of the net to serve images and other science data to a massive set of customers around the globe.

Cloud Vendor Expansion

After taking a much needed vacation I thought I would post an update to catch up on some notable events.  Although Google has been in the cloud business as a “software as a service” (SaaS) provider with their office productivity apps, and a “platform as a service” (PaaS) provider with Google App Engine, they entered the infrastructure as a service (IaaS) field in June, firing a shot over the bow of Amazon, who for the most part is way ahead of everyone in experience and number of products.  HP announced their cloud offering as did Oracle.  All of the new entrants were at limited release status when they made these announcements.

Evaluating Software as a Service

The allure of the cloud for faster deployments of new capabilities with potentially lower equipment and labor costs are hard to turn away from.  For small businesses that either don’t have the capacity or don’t wish to grow their data center, the cloud can be the way to go.  I’ll first focus on evaluating software as a service (SaaS) solutions.  The assumption here is that you will, at a minimum, evaluate SaaS against a local deployment of the solution.  In the near future, I’ll focus on how you might evaluate using Infrastructure as a Service (IaaS) - using the cloud like a data center.

My example evaluation below will use a simple table in a spreadsheet.  The table can contain as many columns as you have solution options.  I’ll break up the evaluation into two sections, one for items that we can put a dollar figure on, one that will contain a rating with a possible multiplier.  The multiplier services as a weighting mechanism where the higher the multiplier, the more important the feature or capability is.  When using a rating (say 1 to 5), larger is better.  I’ll draw from my earlier posts, “Benefits of Cloud Computing” and “Challenges and Risks of Cloud Computing” to help come up with the rating criteria.

Silly Keyboard Review

 Soft, supple and quiet my new keyboard is.  I feel kind of silly doing a review of a keyboard but it is the main input interface on my computer and a tool of my craft.  If I’m not reading, I’m typing.  My quest has been to find the quietest keyboard that still has a really nice touch.  I finally found it, the Logitech Illuminated Keyboard.  So for those of you asking when they saw it, that’s what it is.

The Step Function of Cost

Building a “Private Cloud” within your data center has a lot of potential return on investment (ROI).  David Linthicom’s article, and others, are saying “you need to architect”.  

The focus needs to be on the architecture and the right-fitting enabling technology, including both private and public cloud technology, and not gratuitous opinions. There should be no limits on the technology solution patterns you can apply. If that means private, public, or a mix of both, that's fine as long as you do your requirements homework and can validate that you have chosen the right solution.

I agree, just stop architecting with brochure-ware and really think through your solution.  Think about what you need today, where you are going and how you integrate everything else.  Excluding software as a service (SaaS), when you compare private and public clouds there are some real advantages for a private cloud.  One of the biggest advantages I see public cloud solutions have, is the flexibility to scale up and down and time it takes to do that.

The thing I keep coming back to when I talk to people about public vs. private clouds is what I call “large step functions in cost”. One of the big step functions is cost to build a data center or enlarge it.  That large investments in infrastructure kills your ROI until you fully utilize that capital investment.  If you are building (or enlarging) a data center for example, most companies don’t build just what they need today, they leave some room for growth, and that’s “flexibility”.  That flexibility is costly because it just sits there on the books not really giving you any ROI until you start using it.  Really the ROI from that flexibility is only realized as future cost avoidance of the next step function in cost.  It’s like buying a restaurant and initially only serving breakfast.  Sure you’ll eventually staff up and start getting better use of that capital investment when you start serving lunch and dinner but until you do, your ROI may be negative.  Compare this to the cloud where having the capacity to grow costs you nothing.  Is “public cloud” always the best solution?  No, but you have options, architect, think, and compare.

- Chris Claborne

References & Related

• Benefits of Cloud Computing


• Challenges & Risks of Implementing Cloud Computing

Is The Cloud Prepping for Hockey Stick Growth?

(Updated 3/10/2012)  
There are a number of significant things at play that may indicate the start of a hockey stick growth spurt in cloud computing.  Some may think it’s just a price war but I don’t think so.  In my last article I covered a number of changes that Amazon has made to their AWS offering.  In just the last couple of weeks, Amazon has started lowering their prices on various components of their AWS portfolio including S3 which saw a 192% year over year growth in 2011, and EC2.  This week, Google and Microsoft announced lower prices for storage.  In addition to this, SalesForce.com recently announced pretty good first quarter results, highlighting two big wins, HP and Time Warner (Per ZD Net Article).  It’s hard to tell but SalesForce.com may also be lowering prices a tad.

Rapid Expansion of Amazon's AWS

Since I wrote my last two articles on Amazon Web Services (My intro to AWS and Using AWS), Amazon has continued to pile on capabilities into their of their infrastructure and platform cloud services.  They are rapidly building new products, data centers, and expanding capabilities in existing products.  In just three months since joining the Amazon Web Services Family, they have stuffed my mailbox full news about new product announcements, new data centers, and enhanced or expanded capabilities in existing services.